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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 

WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)03 Responsive to communication(s) filed on 02 March 2007 . 
2a)El This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-27 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) S Claim(s) 1-27 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)Q The drawing(s) filed on is/are: a)D accepted or b)Q objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
11 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. Q Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 
Response to Amendment 

1. Applicant's amendments filed 03/02/2007 have been entered. It is noted that claims 7, 
916, 18,25 and 27 have been amended. As such claims 1 - 27 are pending. Amendment to the 
specification has also been accepted. 

2. Applicant has dutifully overcome the oath/declaration objection, claim objections and 
112, second paragraph rejections. As such the Examiner has withdraws these objections and 
rejections. 

Response to Arguments 

3. Applicant's arguments filed 03/02/2007 have been fully considered but they are not 
persuasive. It is Applicant's assertion that Immonen does not suggest the importance of 
translating the data into a string of words that can be recognized by a human. Applicant further 
contends that Immonen does not suggest the use of the One-Time Pass (OTP) dictionary. The 
Examiner respectfully disagrees. Immonen teaches that a key is a random string that can 
consist of digits or bits (see [0043]). The Examiner believes these bits or digits to be 
recognizable by a human as such. Furthermore, Immonen discloses that while it is possible to 
send the same string with every message, to achieve greater security it is instead ideal to send 
new random strings with each message (see [0044]). The Examiner believes these new random 
strings, which are supplied to the user by a helpdesk to be equivalent to Applicant's one-time 
password dictionary. 

4. For at least these reasons, the Examiner maintains the rejection of claims 1 - 27. 

Claim Rejections - 35 USC § 102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 
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A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another filed in the 
United States before the invention thereof by the applicant for patent, or on an international application 
by another who has fulfilled the requirements of paragraphs (1), (2), and (4) of section 371(c) of this 
title before the invention thereof by the applicant for patent. 

The changes made to 35 U.S.C. 102(e) by the American Inventors Protection Act of 
1999 (AIPA) and the Intellectual Property and High Technology Technical Amendments Act of 
2002 do not apply when the reference is a U.S. patent resulting directly or indirectly from an 
international application filed before November 29, 2000. Therefore, the prior art date of the 
reference is determined under 35 U.S.C. 102(e) prior to the amendment by the AIPA (pre-AlPA 
35 U.S.C. 102(e)). 

5. Claims 1 - 27 are rejected under 35 U.S.C. 102(e) as being anticipated by Immonen in 
US PGPub No. 2003/0120924 (hereinafter US PGPub '924). 

For claim 1 and similar claims 10 and 19, US PGPub '924 discloses: 
A method for confirming communication of data to a first device belonging to a first user from a 
second device belonging to a second user, the method comprising: (see [0018]) 

receiving a message containing data from the second device at the first device; (see 
[0027]: first channel) 

translating the data into a string of words that can be recognized by a human; (see 
[0029] and [0052], line 18) 

allowing the second device to translate the data into a corresponding string of words; 
(see [0019]) 

displaying the string of words to the first user; and 

allowing the first user and the Sjecond user to confirm a match between the string of 
words from the first device and the corresponding string of words from the second device, 
wherein the confirmation process is performed through a separate communication channel, and 
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wherein the confirmation ensures that the data sent by the second device is successfully 
received by the first device, is authentic, and is integrity-checked (see [0031]). (see also 
Abstract; Figure 2) 

For claim 2 and similar claims 1 1 and 20, US PGPub '924 discloses wherein prior to 

receiving the message, the first device broadcasts a request asking for the second device's 

data, and wherein the data can be an identifier, (see [044] and [045]) 

For claim 3 and similar claims 12 and 21, US PGPub '924 discloses: 
wherein the message received by the first device is signed with a private key 

corresponding to a public key associated with the second device; and 

wherein the method further comprises using the public key associated with the second 

device to verify that the message is signed with the private key associated with the second 

device, (see [0054], lines 7-10) 

For claim 4 and similar claims 13 and 22, US PGPub '924 discloses: 

wherein while receiving the message, the first device receives more than one message; 

and 

wherein the method further comprises translating the data in the other messages into 
strings of words which can be recognized by a human, and displaying these strings of words to 
the first user, thereby allowing the first user to match one of these strings of words with the 
corresponding string derived by the second device from the original data (see [0029]). 

For claim 5 and similar claims 14 and 23, US PGPub '924 discloses wherein prior to the 
reception of the message at the first device, the first user obtains a portion of the hash of the 
data on a separate communication channel and enters this portion into the first device, and 
wherein the first device uses this portion to filter subsequently received messages, (see [0043], 
authentication value; Figure 3 a & b) 
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For claim 6 and similar claims 15 and 24, US PGPub '924 discloses wherein the data 

received at the first device contains a cryptographically generated address (CGA) belonging to 

the second device, which is generated by: 

performing a hash function on the second device's public key; and 

constructing the CGA by combining a number of bits of an address belonging to the 

second device and a number of bits from the result of the hash function, (see [0045]; [0047): 

check code] 

For claim 7 and similar claims 16 and 25, US PGPub '924 discloses: 

wherein the message received by the first device includes a public key associated with 

the second device; and 

wherein the method further comprises performing a hash function on the public key to 

verify the association between the CGA and the public key associated with the second device. 

(see [0045]; [0047]) 

For claim 8 and similar claims 17 and 26, US PGPub '924 discloses wherein the 
translation uses a one-time password (OTP) dictionary, (see [0044], page 3, lines 7-9) 
For claim 9 and similar claims 18 and 27, US PGPub '924 discloses: 
wherein the request includes a Crypto-Based Identifier (CBID) belonging to the first 
device; and 

wherein the request is signed with a private key associated with the first device, thereby 
allowing the request to be verifiably associated with the first device, (see [0044]; lines 3-5) 

Conclusion 

6. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time policy as 
set forth in 37 CFR 1.136(a). 
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A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing date 
of this final action. 

7. Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Laurel Lashley whose telephone number is 571-272-0693. The examiner 
can normally be reached on Monday - Thursday, alt Fridays btw 7:30 am & 5 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron, Jr. can be reached on 571-272-3799. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Laurel Lashley 
Examiner 
Art Unit 2132 
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